CVE-2007-3779: Medium severity Squirrelmail GPG Plugin vulnerability
Published Jul 15, 2007
·Updated
PHP local file inclusion vulnerability in gpgpopinit.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.
Affected Software
1 affected component
Squirrelmail GPG Plugin=2.1
Remediation
Patch Available
Patch Available
Event History
Jul 15, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3779?
CVE-2007-3779 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary local files.
2
How do I fix CVE-2007-3779?
To fix CVE-2007-3779, update the GPG Plugin for SquirrelMail to version 2.1 or later.
3
What is affected by CVE-2007-3779?
CVE-2007-3779 affects the GPG Plugin version 2.1 and earlier for SquirrelMail.
4
What type of vulnerability is CVE-2007-3779?
CVE-2007-3779 is a local file inclusion vulnerability that can be exploited by remote attackers.
5
Can CVE-2007-3779 be exploited remotely?
Yes, CVE-2007-3779 can be exploited remotely by attackers to include and execute local files.